SEPTEMBER 14, 2026
Live Feed
Back to database
Case File

CVE-2026-86299

CRITICAL · CVSS 9.9 EPSS 1.98% Public Exploit

Source: NVD + CISA KEV + EPSS · Published 2026-09-07 · Last synced 2026-09-14

CyberRota Analysis

AI-Generated

A critical vulnerability exists in the Linksys RE7000 router, specifically within the PingTest Handler, allowing remote attackers to perform OS command injection through manipulated parameters in the pingTest function. This could lead to unauthorized command execution on the device, potentially compromising the network's security. Organizations using this router should prioritize immediate patching or mitigation measures to protect against potential exploitation.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

Detected Signals
exploit
GitHub PoC Links

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2026-86299
Severity
CRITICAL
CVSS
9.9
EPSS
1.98%

Original NVD Description

A vulnerability was detected in Linksys RE7000 2.0.15. This affects the function platform_event_pingTest of the file /cgi-bin/json.cgi?PingTest of the component PingTest Handler. The manipulation of the argument pingTestIp/pingTestPktSize/pingTestTimes results in os command injection. The attack can be launched remotely. The exploit is now public and may be used.